Comprehensive security audit workflow for a repository. Orchestrates reconnaissance, dependency scanning, and static analysis to produce a detailed threat report.
This skill provides a structured workflow for performing a tactical security audit on a codebase.
github_recon to map the repository structure and identify sensitive files (e.g., config files, entry points).dependency_audit to identify vulnerable third-party packages.static_analysis on high-risk files discovered during reconnaissance.cve_lookup to understand the threat.Lead with Threat Level: [LOW | MEDIUM | HIGH | CRITICAL].
eval(), hardcoded keys).Provide specific, actionable commands to patch the vulnerabilities (e.g., npm update, chmod 600).